Prev: Raw socket link indication
Next: How much security risk do I have from wordpress (Ubuntu)
From: Chris Cox on 14 May 2010 15:20
On Fri, 2010-05-14 at 16:24 +0800, sl(a)exabyte wrote:
> I am no network expert.
>
> Using LanView Packet Capture, I noticed recently that even if a PC (on a
> LAN) is off, internet traffic was still directed at this PC (the destination
> IP identifies the PC).
>
> Is this normal ?

Yes (probably).

Newer devices can be probed for inventory/asset purposes even when off (for example, Intel AMT).

There can be other reasons as well. Good time to get to know your hardware.


From: Dariusz Malec on 14 May 2010 17:19
sl(a)exabyte pisze:
> I am no network expert.
>
> Using LanView Packet Capture, I noticed recently that even if a PC (on a
> LAN) is off, internet traffic was still directed at this PC (the destination
> IP identifies the PC).
>
> Is this normal ?
>
> Thanks.
>
>
How much traffic have you noticed? And what protocols?

--
Regards
Dariusz Malec
From: sl on 16 May 2010 00:13
Dariusz Malec wrote:
> sl(a)exabyte pisze:
>> I am no network expert.
>>
>> Using LanView Packet Capture, I noticed recently that even if a PC
>> (on a LAN) is off, internet traffic was still directed at this PC
>> (the destination IP identifies the PC).
>>
>> Is this normal ?
>>
>> Thanks.
>>
>>
> How much traffic have you noticed? And what protocols?

Sorry, never at PC yesterday.

As to how much traffic, I am not sure how to describe; but I see packet size
of 60-80 (I think, not sure it is unit K) coming from a bunch of IPs. As I
see the switch (a mini-switch in front of me) it continually blinks, and the
LanView shows the packet info.

It just keeps blinking, till I decide that something may be wrong that I
switch off the boradband modem for 5 minutes or so. I know the other PC is
not on and it is using a static IP.



From: sl on 16 May 2010 01:02
Dariusz Malec wrote:
> sl(a)exabyte pisze:
>> I am no network expert.
>>
>> Using LanView Packet Capture, I noticed recently that even if a PC
>> (on a LAN) is off, internet traffic was still directed at this PC
>> (the destination IP identifies the PC).
>>
>> Is this normal ?
>>
>> Thanks.
>>
>>
> How much traffic have you noticed? And what protocols?

Sorry, it is UDP.


From: unruh on 16 May 2010 07:20
On 2010-05-16, sl(a)exabyte <ecp_gen(a)my-rialto.com> wrote:
> Dariusz Malec wrote:
>> sl(a)exabyte pisze:
>>> I am no network expert.
>>>
>>> Using LanView Packet Capture, I noticed recently that even if a PC
>>> (on a LAN) is off, internet traffic was still directed at this PC
>>> (the destination IP identifies the PC).
>>>
>>> Is this normal ?
>>>
>>> Thanks.
>>>
>>>
>> How much traffic have you noticed? And what protocols?
>
> Sorry, never at PC yesterday.
>
> As to how much traffic, I am not sure how to describe; but I see packet size
> of 60-80 (I think, not sure it is unit K) coming from a bunch of IPs. As I
> see the switch (a mini-switch in front of me) it continually blinks, and the
> LanView shows the packet info.
>
> It just keeps blinking, till I decide that something may be wrong that I
> switch off the boradband modem for 5 minutes or so. I know the other PC is
> not on and it is using a static IP.

What kind of broad band modem? ADSL. cable?
It might be that your machine is comprimized and the traffic is someone
trying to use your machine. It could be that this is just broadcast
traffic, or arp requests (the small packets would indicate that).
Are you getting one packet a minute, a second, a millisecond?

>
>
>
First  |  Prev  |  Next  |  Last
Pages: 1 2 3
Prev: Raw socket link indication
Next: How much security risk do I have from wordpress (Ubuntu)